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CLAIMS 

1. A method of providing electronic data from a first computer to a second computer, the 
method comprising the steps of: 

5 1: at least partially encrypting the data with an encryption key (K s ) in the first 

computer, said encryption key (K 5 ) having a corresponding decryption key (K*), 

2: communicating the at least partially encrypted data from the first computer to 
the second computer, 

3: the second computer requesting the decryption key (Ka) from the first computer, 
1 0 4: the first computer providing the decryption key {K d ) to the second computer, 

5: the second computer decrypting the at least partially encrypted data using the 
decryption key (Kd), 

6: rendering the decryption key (K d ) unfit for use, 

7: outputting the data to an output device. 

15 

2. A method according to claim 1, wherein step 2 further comprises the step of branding 
the at least partially encrypted data with an identifier (l u ) in the first computer, and wherein 
step 3 is performed by the second computer providing the identifier (l u ). 

20 3. A method according to claim 1 , wherein step 6 comprises deleting the decryption key 
<K d ) from the second computer after step 5 has been performed. 

4. A method according to claim 1, wherein step 6 comprises storing the decryption key 
(Kc) in a volatile memory of the second computer only, 

25 

5. A method according to claim 1 , wherein step 4 comprises the steps of 

- determining whether the second computer fulfils one or more predetermined criteria 
selected from a group of criteria, 

- providing the decryption key (Kd) only if the second computer fulfils one or more of 
30 said predetermined criteria. 

6. A method according to claim 5, wherein the determining step comprises determining 
whether the second computer fulfils one or more criteria selected from the group of criteria 
consisting of, 
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- the time elapsed between the en6ryption of the data and the request for the decryption 
key (Kd) does not exceed a predetermined time interval, 

- the decryption key (K d ) has not been requested more than a predetermined number of 
times, 

5 - the second computer is a predetermined computer, 

- valid payment has been provided, 

- the hardware being used by the second computer is a predetermined hardware, 

- the e-mail address of the user is a predetermined e-mail address, 

- the user name of the user is a predetermined user name, 

1 0 - the output device is a predetermined type of output device, 

- the output device driver is a predetermined output device driver, 

- the network ID is a predetermined network ID, 

7. A method according to claim 1, wherein step 1 is performed using a random secret 
15 encryption key . 

8, A method according to claim 1, wherein step 4 is performed using an encrypted session 
between the first computer and the second computer. 

20 9, A method according to claim 1 , wherein step 7 is performed by dividing the at least 
partially encrypted data into a number of subparts, each subpart in turn being output to an 
output device, 

10. A method according to claim 9, wherein step 7 is performed at least substantially 
25 simultaneously with step 5, in such a way that each subpart of the data is in turn 

decrypted and output to the output device. 

1 1. A method according to claim 10, wherein step 7 is performed by streaming the data to 
the ouiput device. 

30 

12. A method according to claim 1 f further comprising the step of providing payment to the 
first computer. 

13. A method according to claim 12, wherein the step of providing payment comprises the 
35 step of charging a credit card. 
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14. A method according to claim 13, wherein the step of charging a credit card further 
comprises the steps of: 

- entering relevant credit card data, 

5 - the first computer checking whether the corresponding credit card is valid and 
chargeable. 

15. A method according to claim 1, further comprising the steps oft 

a: the second computer re-requesting the decryption key (Kd), 
10 b: the first computer providing the decryption key (Kd) to the second computer, 

c: the second computer decrypting the at least partially encrypted data, 
d: rendering the decryption key (K d ) unfit for use ( 
e: outputting the data to an output device. 

15 16. A method according to claim 15, wherein step d comprises deleting the decryption key 
(Kd) from the second computer after the data has been output to the output device. 

17. A method according to claim 15, further comprising the step of providing payment to 
the first computer. 

20 

18. A method according to claim 17, wherein the step of providing payment comprises the 
step of charging a credit card. 

1 9. A method according to claim 1 8, wherein the step of charging a credit card further 
25 comprises the steps of: 

- entering relevant credit card data, 

- the first computer checking whether the corresponding credit card is valid and 
chargeable. 

30 20. A method according to claim 1 , comprising the step of providing electronic data from a 
server device to a client device. 

21 . A method according to claim 1, further comprising the steps of: 

- the first computer requesting additional information from the second computer, 
35 - the second computer providing said additional information, 
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- the first computer using said additional information for determining whether to provide 
the decryption key (K^) or not. 

22. A method according to claim 21 , wherein the step of the second computer providing 
5 said additional information comprises the step of the user providing at least some of said 

additional information. 

23. A computer program system for providing electronic data from a first computer to a 
second computer, the computer program system being adapted to: 

10 1: at least partially encrypt the data with an encryption key (K fl ) in the first 

computer, said encryption key (K E ) having a corresponding decryption key (Kd), 

2; communicate the at least partially encrypted data from the first computer to the 
second computer, 

3: provide a request for the decryption key (Kd) from the second computer to the 
15 first computer, 

4: cause the first computer to provide the decryption key (Kd) to the second 
computer, 

5: cause the second computer to decrypt the at least partially encrypted data using 
the decryption key (Kd), 
20 6: render the decryption key (K d ) unfit for use, 

7: output the data to an output device. 

24. A computer readable data carrier loaded with a computer program system for 
providing electronic data from a first computer to a second computer, the computer 

25 program system being adapted to; 

1: at least partially encrypt the data with an encryption key (K*) in the first 
computer, said encryption key (K a ) having a corresponding decryption key (K d ), 

2: communicate the at least partially encrypted data from the first computer to the 
second computer, 

30 3: provide a request for the decryption key (Kj) from the second computer to the 

first computer, 

4: cause the first computer to provide the decryption key (Ka) to the second 
computer, 

5: cause the second computer to decrypt the at least partially encrypted data using 
35 the decryption key (Ka), 



46 



6: render the decryption key (Kd) unfit for use, 
7: output the data to an output device, 

25, A computer system operatively connected to a computer readable data carrier loaded 
5 with a computer program system for providing electronic data from a first computer of the 

computer system to a second computer of the computer system, the computer system 
and the program system being adapted to: 

1: at least partially encrypt the data with an encryption key (K s ) in the first 
computer, said encryption key (K s ) having a corresponding decryption key (Kd), 
1 0 2; communicate the at least partially encrypted data from the first computer to the 

second computer, 

3: provide a request for the decryption key (Ka) from the second computer to the 
first computer, 

4: cause the first computer to provide the decryption key (K d ) to the second 
1 5 computer, 

5: cause the second computer to decrypt the at least partially encrypted data using 
the decryption key (Kd), 

6: render the decryption key (K<j) unfit for use, 
7: output the data to an output device. 

20 

26. A method of providing electronic data from a first computer to a second computer, the 
method comprising the steps of: 

1: at least partially encrypting the data with an encryption key (K 9 ) in the first 
computer, said encryption key (K 5 ) having a corresponding decryption key (Kd), 
25 2: the second computer requesting the decryption key (K d ) from the first computer, 

3: the first computer providing the decryption key (K d ) to the second computer, 
4: communicating the at least partially encrypted data from the first computer to 
the second computer, 

5: the second computer concurrently receiving and decrypting, by means of a 
30 decryption computer program, the at least partially encrypted data, and outputting the 
data to a selected data output computer program for outputting a signal representative of 
the decrypted data to a selected software program or hardware device, the data output 
computer program being known to render the decrypted data unfit for use after output 
thereof to the selected software program or hardware device, 
35 6: rendering the decrypted data unfit for use. 
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27. A method according to claim 26, further comprising the step of rendering the 
decryption key (K d ) unfit for use. 



5 28. A method according to claim 26, wherein step 6 is performed concurrently with step 5, 

29. A method according to claim 27, whelein the step is performed by deleting the 
decryption key (Kd) from the second computer after step 5 has been performed. 



10 30. A method according to claim 26, wherein step 5 comprises the steps of: 

- dividing the at least partially encrypted, data into a number of subparts, 

- decrypting each subpart in turn, f 

- outputting each subpart in turn to thejjsefected data output computer program, 
■ outputting a signal representative of ejach subpart in turn to the selected software 

1 5 program or hardware device, j 
and wherein step 6 comprises the step of: 

- rendering each subpart unfit for use after it has been output to the selected data 
output computer program. 

20 31 . A method according to claim 30, wherein each subpart is rendered unfit for use before 
the subsequent subpart is decrypted. 



32. A method according to claim 26, wherein step 5 is performed by outputting the data to 
a printer device using a printer driver, th£ printer driver being of a type being known to 



25 render the data unfit for use after output 



thereof to the printer device. 
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33. A method according to claim 26, wherein step 3 comprises the steps of: 

- determining whether the second computer fulfils one or more predetermined criteria 
selected from a group of criteria, 

- providing the decryption key (Kd) oni^if the second computer fulfils one or more of 
said predetermined criteria. 



34. A method according to claim 33, wh 
whether the second computer fulfils one 
35 consisting of, 



drein the determining step comprises determining 
or more criteria selected from the group of criteria 
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5 - 



10 - 



the time elapsed between the encryption of the data and the request for the decryption 
key (Kj) does not exceed a predetermined time interval, 

the decryption key (K d ) has not been requested more than a predetermined number of 
times, 

the second computer is a predetermined computer, 
valid payment has been provided, j 

the hardware being used by the second computer is a predetermined hardware, 

the e-mail address of the user is a predetermined e-mail address, 

the user name of the user is a predetermined user name, 

the output device is a predetermined type of output device, 

the output device driver is a predetermined output device driver, 

the network ID is a predetermined network ID. 



35. A method according to claim 26, wherein 
1 5 the data is streamed from the second 
computer program. 



the output device is a printer, and wherein 
computer to the printer via the selected data output 



36, A computer program system of provid 
second computer, the computer program 



20 



hg electronic data from a first computer to a 
system being adapted to: 



1; at least partially encrypt the data with an encryption key (K 5 ) in the first 



computer, said encryption key (Ks) having 



a corresponding decryption key (HQ,), 



2: cause the second computer to request the decryption key (K d ) from the first 
computer, 

3: cause the first computer to provide the decryption key (K^) to the second 
25 computer, 

4: communicate the at least partia iy encrypted data from the first computer to the 
second computer, > 

5; cause the second computer to [concurrently receive and decrypt, by means of a 
decryption computer program, the at least partially encrypted data, and output the data to 
30 a selected data output computer program for outputting a signal representative of the 
decrypted data to a selected software program or hardware device, and cause the data 
output computer program to render the decrypted data unfit for use after output thereof to 
the selected software program or hardware device, 

f for use. 



6: render the decrypted data unfii: 
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i 
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37. A computer readable data carrier loaded with a computer program system of providing 
electronic data from a first computer to a second computer, the computer program system 
being adapted to: 

1: at least partially encrypt the data with an encryption key (K s ) in the first 
5 computer, said encryption key (K s ) having a corresponding decryption key (Kd), 

2: cause the second computer to request the decryption key (Kd) from the first 
computer, 

3: cause the first computer to provide the decryption key (Kd) to the second 
computer, 

10 4: communicate the at least partially encrypted data from the first computer to the 

second computer, 

5: cause the second computer to concurrently receive and decrypt, by means of a 
decryption computer program, the at least partially encrypted data, and output the data to 
a selected data output computer program for outputtlng a signal representative of the 
15 decrypted data to a selected software program or hardware device, and cause the data 
output computer program to render the decrypted data unfit for use after output thereof to 
the selected software program or hardware device, 

6: render the decrypted data unfit foruse. 

20 38. A computer system operatively connected to a computer readable data carrier loaded 
with a computer program system of providing electronic data from a first computer of the 
computer system to a second computer of the computer system, the computer system 
and the computer program system being adapted to; 

1 : at least partially encrypt the data with an encryption key (K s ) in the first 
25 computer, said encryption key (K s ) having a corresponding decryption key (K d ), 

2: cause the second computer to request the decryption key (Kd) from the first 
computer, 

3: cause the first computer to provide the decryption key (Kd) to the second 
computer, 

30 4: communicate the at least partially encrypted data from the first computer to the 

second computer, 

5: cause the second computer to concurrently receive and decrypt, by means of a 
decryption computer program, the at least partially encrypted data, and output the data to 
a selected data output computer program for outputting a signal representative of the 
35 decrypted data to a selected software program or hardware device, and cause the data 
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output computer program to render the decrypted data unfit for use after output thereof to 
the selected software program or hardware device, 
6: render the decrypted data unfit for use. 

5 39. A computer system for providing electronic data comprising 

- a first computer, 

- a second computer, 

- an output device, 

the first computer comprising 
10 - encryption means for at least partially encrypting data with an encryption key (K s ), said 
encryption key (K s ) having a corresponding decryption key (K d ), 

- first communication means for communicating the at least partially encrypted data to 
the second computer, 

- providing means for providing the decryption key (K d ) to the second computer on 
15 request, 

the second computer comprising 

second communication means for receiving the at least partially encrypted data from 
the first computer, 

requesting and receiving means for requesting and receiving the decryption key (K d ) 
20 from the first computer, 

- decryption means for decrypting the at least partially encrypted data, 

- outputting means for outputting the data to the output device, 
means for rendering the decryption key (K^) unfit for use. 

25 40. A computer system according to claim 39, wherein the means for rendering the 

decryption key (K^) unfit for use comprises deleting means for deleting the decryption key 
(Ka) after the data has been decrypted. 

41 . A computer system according to claim 3S, wherein the first computer is a server 
30 device and the second computer is a client device. 

42. A computer system according to claim 39, wherein the first communication means 
comprises a global computer network- 
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43. A computer system according to claim 39, wherein the second communication means 
comprises a global computer network. 

44. A computer system according to claim 39, wherein the first computer further 
5 comprises means for receiving payment. 

45. A computer system according to claim 44, wherein the means for receiving payment 
comprises means for checking the validity and chargeability of a credit card. 

10 46. A computer system according to claim 39, wherein the out putting means for outputting 
the data to the output device comprises a data output computer program for outputting a 
signal representative of the decrypted data to a selected software program or hardware 
device, the data output computer program being known to render the decrypted data unfit 
for use after output thereof to the selected software program or hardware device. 

15 

47. A method of transferring data from a computer system to an output device, the 
computer system comprising a first computer and a plurality of second computers, said 
first computer and said second computers being interconnected via a computer network, 
the data being present at at least one of the second computers, the method comprising 

20 the steps of: 

1 : sending, by means of said at least one second computer, a request to the first 
computer for permission to output the data to the output device, said request including an 
identification of the output device, 

2: checking, by means of the first computer, whether the output device is an 
25 allowed type of output device, 

3: the first computer providing an answer to the request to the second computer, 
the answer including a permission to output the data to the output device if the output 
device is of an allowed type, 

4: if the output device is of an allowed type; outputting the data from the second 
30 computer to the output device. 

48. A method according to claim 47, wherein step 2 is performed by, by means of the first 
computer, comparing the type of output device with a predefined positive list of allowed 
types of output devices, and wherein the answer of step 3 includes a permission to output 
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the data to the output device only if the type of output device is present on said predefined 
positive list. 

49. A method according to claim 47, wherein step 2 is performed by, by means of the first 
5 computer, comparing the type of output device with a predefined negative list of not- 
allowed types of output devices, and wherein the answer of step 3 includes a permission 
to output the data to the output device only if the type of output device is not present on 
said predefined negative list 

10 50. A method according to claim 47 T wherein step 2 is performed by, by means of the first 
computer, checking whether the output device comprises an allowed type of hardware. 

51. A method according to claim 47, wherein step 2 is performed by, by means of the first 
computer, checking whether the output device comprises an allowed type of output driver. 

15 

52. A method according to claim 47, wherein the answer of step 3 further includes a 
decryption key for decrypting encrypted electronic data. 

53. A method according to claim 47, the output device comprising a printer, wherein step 
20 4 is performed by printing the data using the printer. 

54. A method according to claim 47, wherein the request of step 1 includes an 
identification of the driver of the output device. 

25 55. A computer program system for transferring data from a computer system to an output 
device, the computer system comprising a first computer and a plurality of second 
computers, said first computer and said second computers being interconnected via a 
computer network, the data being present at at least one of the second computers, the 
computer program system being adapted to: 

30 1 : send, by means of said at least one second computer, a request to the first 

computer for permission to output the data to the output device, said request including an 
identification of the output device, 

2: check, by means of the first computer, whether the output device is an allowed 
type of output device, 
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3: cause the first computer to provide an answer to the request to the second 
computer, the answer including a permission to output the data to the output device if the 
output device is of an ai lowed type, 

4: if the output device is of an allowed type: output the data from the second computer to 
5 the output device. 

56. A computer readable data carrier loaded with a computer program system for 
transferring data from a computer system to an output device, the computer system 
comprising a first computer and a plurality of second computers, said first computer and 
10 said second computers being interconnected via a computer network, the data being 
present at at least one of the second computers, the computer program system being 
adapted to: 

V. send, by means of said at least one second computer, a request to the first 
computer for permission to output the data to the output device, said request including an 
1 5 identification of the output device, 

2: check, by means of the first computer, whether the output device is an allowed 
type of output device, 

3: cause the first computer to provide an answer to the request to the second 
computer, the answer including a permission to output the data to the output device if the 
20 output device is of an allowed type, 

4: if the output device is of an allowed type: output the data from the second computer to 
the output device. 

57. A computer system operatively connected to a computer readable data carrier loaded 
25 with a computer program system for transferring data from a computer system to an 
output device, the computer system comprising a first computer and a plurality of second 
computers, said first computer and said second computers being interconnected via a 
computer network, the data being present at at least one of the second computers, the 
computer system and the computer program system being adapted to: 
30 1 : send, by means of said at least one second computer, a request to the first 

computer for permission to output the data to the output device, said request including an 
identification of the output device, 

2: check, by means of the first computer, whether the output device is an allowed 
type of output device, 
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3: cause the first computer to provide an answer to the request to the second 
computer, the answer including a permission to output the data to the output device if the 
output device is of an allowed type, 

4: if the output device is of an allowed type: output the data from the second computer to 
5 the output device. 

58. A method of providing electronic data from a first computer to a second computer, the 
second computer comprising an output device, the method comprising the steps of: 

1 : at least partially encrypting the data with an encryption key (K 5 ) in the first 
10 computer, said encryption key (K s ) having a corresponding decryption key (K d ), 

2: communicating the at least partially encrypted data from the first computer to 
the second computer, 

3: the second computer requesting the decryption key (Kd) from the first computer, 

4: checking whether the driver of the output device is an allowed type of driver, 
15 5: the first computer providing the decryption key (K d ) to the second computer only 

if said driver is an aflowed type of driver, 

6: the second computer decrypting the at least partially encrypted data in case 
said decryption key (K d ) is provided, 

7; outputting the decrypted data to the output device. 

20 

59. A method according to claim 58, wherein the output device is a printer, and wherein 
step 7 is performed by printing the data. 

60. A method according to claim 58, wherein step 4 is performed by comparing the type of 
25 driver with a predefined positive list of allowed types of drivers, and wherein step 5 is only 

performed if the driver is of a type which is present on said predefined positive list. 

61. A method according to claim 58, wherein step 4 is performed by comparing the type of 
driver with a predefined negative list of not-allowed types of drivers, and wherein step 5 is 

30 only performed if the driver is of a type which is not present on said predefined negative 
list. 

62. A method according to claim 58, further comprising the step of rendering the 
decryption key (K d ) unfit for use. 

35 
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63. A method according to claim 62, wherein the step of rendering the decryption key (KJ 
unfit for use comprises deleting the decryption key (K d ) from the second computer after 
step 6 has been performed. 

5 64. A method according to claim 62 r wherein the step of rendering the decryption key (K d ) 
unfit for use comprises storing the decryption key (K d ) in a volatile memory of the second 
computer only. 

65. A method according to claim 58, further comprising the steps of: 

10 - the second computer concurrently receiving and decrypting, by means of a decryption 
computer program, the at least partially encrypted data, and outputting the data to a 
selected data output computer program for outputting a signal representative of the 
decrypted data to a selected software program or hardware device, the data output 
computer program being known to render the decrypted data unfit for use after output 

15 thereof to the selected software program or hardware device, 
- rendering the decrypted data unfit for use. 

66. A method according to claim 58, further comprising the steps of; 

a: the second computer re-requesting the decryption key (K d ), 
20 b: checking whether the driver of the output device is an allowed type of driver, 

c: the first computer providing the decryption key (K$) to the second computer only 
if said driver is an allowed type of driver, 

d: the second computer decrypting the at least partially encrypted data in case 
said decryption key (Kd) is provided, 
25 e: outputting the decrypted data to the output device. 

67. A method according to claim 66, further comprising the step of, by means of a 
counter, counting the number of times the decryption key (K d ) has been provided to the 
first computer, said counting step being performed by augmenting said counter each time 

30 the decryption key (K d ) has been provided to the first computer, step c being performed 
only if the number of times the decryption key (K<j) has previously been requested does 
not exceed a predetermined number of times. 

68. A method according to claim 58, further comprising the steps of: 



56 



- determining whether the second computer fulfils one or more predetermined criteria 
selected from a group of criteria, 

- providing the decryption key (Kd) only if the second computer fulfils one or more of 
said predetermined criteria. 

5 

69. A method according to claim 68, wherein the determining step comprises determining 
whether the second computer fulfils one or more criteria selected from the group of criteria 
consisting of, 

- the time elapsed between the encryption of the data and the request for the decryption 
10 key (Kd) does not exceed a predetermined time interval, 

- the decryption key (Kd) has not been requested more than a predetermined number of 
times, 

- the second computer is a predetermined computer, 

- valid payment has been provided, 

15 - the hardware being used by the second computer is a predetermined hardware, 

- the e-mail address of the user is a predetermined e-mail address, 

- the user name of the user is a predetermined user name, 

- the network ID is a predetermined network ID. 

20 70. A computer program system for providing electronic data from a first computer to a 

second computer, the second computer comprising an output device, the computer 

program system being adapted to: 

1: at least partially encrypt the data with an encryption key (Ks) in the first 

computer, said encryption key (K s ) having a corresponding decryption key (Kd), 
25 2: communicate the at least partially encrypted data from the first computer to the 

second computer, 

3: cause the second computer to request the decryption key (Kd) from the first 
computer, 

4: check whether the driver of the output device is an allowed type of driver, 
30 5: cause the first computer to provide the decryption key (K d ) to the second 

computer only if said driver is an allowed type of driver, 

6: cause the second computer to decrypt the at least partially encrypted data in 
case said decryption key (Kd) is provided, 

7: output the decrypted data to the output device. 

35 
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71. A computer readable data carrier loaded with a computer program system for 
providing electronic data from a first computer to a second computer, the second 
computer comprising an output device, the computer program system being adapted to: 
1: at least partially encrypt the data with an encryption key (K s ) in the first 
5 computer, said encryption key (K s ) having a corresponding decryption key (K,), 

2: communicate the at least partially encrypted data from the first computer to the 
second computer, 

3: cause the second computer to request the decryption key (K^ from the first 
computer, 

10 4: check whether the driver of the output device is an allowed type of driver, 

5: cause the first computer to provide the decryption key (Kd) to the second 
computer only if said driver is an allowed type of driver, 

6: cause the second computer to decrypt the at least partially encrypted data in 
case said decryption key (K d ) is provided, 
1 5 7: output the decrypted data to the output device. 

72. A computer system operatively connected to a computer readable data carrier loaded 
with a computer program system for providing electronic data from a first computer to a 
second computer, the second computer comprising an output device, the computer 
20 system and the computer program system being adapted to: 

1: at least partially encrypt the data with an encryption key (K s ) in the first 
computer, said encryption key (K s ) having a corresponding decryption key (Kd) r 

2: communicate the at least partially encrypted data from the first computer to the 
second computer, 

25 3: cause the second computer to request the decryption key (Kd) from the first 

computer, 

4: check whether the driver of the output device is an allowed type of driver, 
5: cause the first computer to provide the decryption key (Kd) to the second 

computer only if said driver is an allowed type of driver, 
30 6: cause the second computer to decrypt the at least partially encrypted data in 

case said decryption key (K d ) is provided, 

7: output the decrypted data to the output device. 



73. A method of decrypting data, the method utilising a hardware processor containing an 
inaccessible part, the method comprising, by means of said hardware processor: 
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- storing, in the hardware processor, an encryption/decryption key (AB) comprising a 
public part (A) and a corresponding private part (B), the private part (B) of the key 
(AB) being stored in the inaccessible part of the hardware processor, 

- outputting the public part (A) of the key (AB) to an external processor or program, 
5 - receiving, from said external processor, an encrypted decryption key (E) which is 

encrypted by means of the public part (A) of the key (AB), 

- decrypting key (E) into the inaccessible part of the hardware processor by using the 
private part (B), 

- receiving data encrypted with encryption key (E), 
10 - decrypting the data using the decrypted key (E), 

outputting the decrypted data. 



74. A method according to claim 73, wherein the outputting step is performed by 
outputting the decrypted data to an output device. 

15 

75. A method according to claim 73, further comprising the step of encrypting the key (E) 
externally to the hardware processor. 

76. A method according to claim 73, further comprising the step of encrypting the data 
20 with an encryption key corresponding to the decryption key (E) externally to the hardware 

processor. 

77. A method according to claim 73, further comprising the step of, by means of the 
hardware processor, generating and storing the encryption/decryption key (AB) in the 

25 hardware processor. 



78. A method according to claim 73, further comprising the step of rendering the 
decryption key (E) unfit for use after the data has been decrypted. 

30 79. A method according to claim 78, wherein the step of rendering the decryption key (E) 
unfit for use comprises deleting the decryption key (E) from the hardware processor. 

80. A computer program system for decrypting data, the computer program system being 
adapted to co-operate with a hardware processor containing an inaccessible part T the 
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computer program system being further adapted to, in co-operation with the hardware 
processor: 

- store, in the hardware processor, an encryption/decryption key (AB) comprising a 
public part (A) and a corresponding private part (B), the private part (B) of the key 

5 (AB) being stored in the inaccessible part of the hardware processor, 

- output the public part (A) of the key (AB) to an external processor or program, 

- receive, from said external processor, an encrypted decryption key (E) which is 
encrypted by means of the public part (A) of the key <AB) ? 

- decrypt key (E) into the inaccessible part of the hardware processor by using the 
10 private part (B) r 

- receive data encrypted with encryption key (E), 

- decrypt the data using the decrypted key <E), 

- output the decrypted data. 

15 81 . A computer readable data carrier loaded with a computer program system for 
decrypting data, the computer program system being adapted to co-operate with a 
hardware processor containing an inaccessible part, the computer program system being 
further adapted to, in co-operation with the hardware processor: 

- store, in the hardware processor, an encryption/decryption key (AB) comprising a 
20 public part (A) and a corresponding private part (B), the private part (B) of the key 

(AB) being stored in the inaccessible part of the hardware processor, 

- output the public part (A) of the key (AB) to an external processor or program, 

- receive, from said external processor, an encrypted decryption key (E) which is 
encrypted by means of the public part (A) of the key (AB), 

25 - decrypt key (E) into the inaccessible part of the hardware processor by using the 
private part (B) t 

- receive data encrypted with encryption key (E), 

- decrypt the data using the decrypted key (E), 
output the decrypted data. 

30 

82. A computer system operativeiy connected to a computer readable data carrier loaded 
with a computer program system for decrypting data, the computer system and the 
computer program system being adapted to co-operate with a hardware processor 
containing an inaccessible part, the computer system and the computer program system 
35 being further adapted to, in co-operation with the hardware processor: 
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store, in the hardware processor an encryption/decryption key (AB) comprising a 
public part (A) and a corresponding private part (B), the private part (B) of the key 
(AB) being stored in the inaccessible part of the hardware processor, 
output the public part (A) of the key (AB) to an external processor or program, 
5 - receive, from said external processor, an encrypted decryption key (E) which is 
encrypted by means of the public part (A) of the key (AB), 

- decrypt key (E) into the inaccessible part of the hardware processor by using the 
private part (B), 

- receive data encrypted with encryption key (E), 
10 - decrypt the data using the decrypted key (E), 

- output the decrypted data. 

83. An electronic processor containing an inaccessible part, and being adapted to, in co- 
operation with a computer program system, to decrypt data and to; 
15 - store, in the hardware processor, an encryption/decryption key (AB) comprising a 
public part (A) and a corresponding private part (B), the private part (B) of the key 
(AB) being stored in the inaccessible part of the hardware processor, 

- output the public part (A) of the key (AB) to an external processor or program, 
receive, from said external processor, an encrypted decryption key (E) which is 

20 encrypted by means of the public part (A) of the key (AB) ; 

- decrypt key (E) into the inaccessible part of the hardware processor by using the 
private part (B), 

- receive data encrypted with encryption key (E), 

- decrypt the data using the decrypted key (E), 
25 - output the decrypted data. 

34. A method of distributing electronic data via a computer network, said electronic data 
originating from a plurality of publishers, the method comprising the steps of: 

1 : each of the plurality of publishers making electronic data available from a first 
30 computer being connected to the computer network, 

2: the first computer distributing electronic data to users on demand, and 
3: the first computer controlling the usage of the electronic data being made 
available to each user. 
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85. A method according to claim 84, wherein step 3 is performed by counting the number 
of times the electronic data has been made available, and wherein usage of the data is 
prevented or limited in case said number of times exceeds a predetermined number of 
times. 

5 

86. A method according to claim 84, wherein step 3 comprises the steps of: 

- at least partially encrypting the data with an encryption key (K s ) in the first computer 
prior to distributing the data, so that the data is distributed in an encrypted form, said 
encryption key (K s ) having a corresponding decryption key (K d ), 

1 0 - the user requesting the decryption key (K d ), 

- the first computer providing the decryption key (K d ) to the user, 

- decrypting the at feast partially encrypted data using the decryption key (K d ), 

- rendering the decryption key (Kd) unfit for use, 

- outputting the data to an output device. 

15 

87. A method according to claim 86, wherein the step of rendering the decryption key (K d ) 
unfit for use comprises deleting the decryption key (Kd). 

88. A method according to claim 86, wherein the decryption key (K d ) is only provided if the 
20 user fulfils one or more predetermined criteria selected from a group of criteria. 

89. A method according to claim 88, wherein the group of criteria consists of: 

- the time elapsed between the encryption of the data and the request for the decryption 
key (Kd) does not exceed a predetermined time interval, 

25 - the decryption key (K d ) has not been requested more than a predetermined number of 
times, 

- the computer used by the user is a predetermined computer, 

- valid payment has been provided, 

- the hardware being used by the user is a predetermined hardware, 
30 - the e-mail address of the user is a predetermined e-mail address, 

- the user name of the user is a predetermined user name, 

- the output device being used by the user is a predetermined type of output device, 

- the output device driver being used by the user is a predetermined output device 
driver, 

35 - the network ID is a predetermined network ID. 
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90. A method according to claim 84, further comprising the steps of: 

- the first computer charging each user for the data made available to the user, 

- the first computer providing payment to each of the publishers. 

5 

91 . A method according to claim 90, wherein the amount charged is dependent on the 
content of the distributed electronic data and on the number of copies made available to 
the user. 

10 92. A method according to claim 90, wherein the payment to each of the publishers is 
dependent on the content of the distributed electronic data and on the number of copies 
being made available to the users. 

93. A method according to claim 90, wherein the step of charging each user is performed 
15 by charging a credit card of each user. 

94. A method according to claim 90, wherein the amount charged is determined by the 
individual publisher. 

20 95, A method according to claim 90, wherein step 1 is performed by, by means of the first 
computer, providing a Uniform Resource Locator (URL) corresponding to each piece of 
electronic data being made available to the respective publisher. 

96. A method according to claim 95, wherein the Uniform Resource Locator(s) (URL(s)) 
25 is/are placed on a web site belonging to the respective publisher, so as to provide a direct 

link from said web site to the electronic data. 

97. A method according to claim 95, wherein the Uniform Resource Locator(s) (URL(s)} 
is/are placed on a web site belonging to the owner of the first computer, and wherein step 

30 2 is performed by the user selecting the URL(s) corresponding to the piece(s) of data to 
which the user wishes to gain access. 

98. A method according to claim 84, wherein the electronic data being distributed 
comprises material to be printed. 

35 
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99. A method according to daim 84, wherein the electronic data is distributed via a global 
computer network. 

100. A computer program system for distributing electronic data via a computer network, 
5 said electronic data originating from a plurality of publishers, the computer program 

system being adapted to: 

1: cause each of the plurality of publishers to make electronic data available from 
a first computer being connected to the computer network, 

2: cause the first computer to distribute electronic data to users on demand, and 
10 3: cause the first computer to control the usage of the electronic data being made 

available to each user. 

101. A computer readable data carrier loaded with a computer program system for 
distributing electronic data via a computer network, said electronic data originating from a 

15 plurality of publishers, the computer program system being adapted to: 

1: cause each of the plurality of publishers to make electronic data available from 
a first computer being connected to the computer network, 

2: cause the first computer to distribute electronic data to users on demand, and 
3: cause the first computer to control the usage of the electronic data being made 

20 available to each user. 

102. A computer system operatively connected to a readable data carrier loaded with a 
computer program system for distributing electronic data via a computer network, said 
electronic data originating from a plurality of publishers, the computer system and the 

25 computer program system being adapted to: 

1: cause each of the plurality of publishers to make electronic data available from 
a first computer being connected to the computer network, 

2: cause the first computer to distribute electronic data to users on demand, and 
3: cause the first computer to control the usage of the electronic data being made 

30 available to each user. 



